8f1234e98ac753c9a9e462e56e7d6626

General

Target

8f1234e98ac753c9a9e462e56e7d6626
Size

10KB
MD5

8f1234e98ac753c9a9e462e56e7d6626
SHA1

f3b58168c97feb68cf7d68e297320ed9ccf0e540
SHA256

44bbb9260c4562bf1ce9ec292d09800c52579db8ac6de595265a5057c284d2e6
SHA512

6014d8b2f03c00264b859aa2c6fb2c1474d31830bceea8e7c2a0ac98fc5d45ae13854906e4499372d28db19c1958a430b091835e5e52ba3807bb246146332258
SSDEEP

192:n7TLjf+QQl50x6nu6MjafrqBA8b+Z1JYIpN3Y55WYqkcbDTtKhq7bM3XC:n7TLSQWqsnu6MY9Z1JFA55WYqkcTtOGF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/factorylink_x.exe

Files

8f1234e98ac753c9a9e462e56e7d6626
.zip
factorylink_x.c
factorylink_x.exe
.exe windows:4 windows x86 arch:x86

8d2bd4b92e207e5e905bd57c4fa94b50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

_close
_open
_read
_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_exit
_iob
_onexit
_setmode
abort
atexit
atoi
calloc
exit
fprintf
fputc
free
fwrite
malloc
memcpy
memset
printf
puts
realloc
setbuf
signal
strerror
strlen
vfprintf

ws2_32

WSAGetLastError
WSAStartup
closesocket
connect
gethostbyname
htons
inet_addr
inet_ntoa
ntohl
ntohs
recv
select
send
setsockopt
socket

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 108B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
winerr.h

Sharing

General

Malware Config

Signatures

Files

8d2bd4b92e207e5e905bd57c4fa94b50

Headers

File Characteristics

Imports

kernel32

msvcrt

ws2_32

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 16B

.rdata Size: 4KB - Virtual size: 3KB

.bss Size: - Virtual size: 108B

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 16B

.rdata
Size: 4KB - Virtual size: 3KB

.bss
Size: - Virtual size: 108B

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B